$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9a38104-62e5-33c0-8548-7c4562848dd7.roa File: f9a38104-62e5-33c0-8548-7c4562848dd7.roa (raw, json) Hash identifier: BvfEy7A8UWzEpvnRwT/RHoxMjrmXqqrSQ9p8wgZ+h44= Subject key identifier: 7E:48:61:DA:4B:60:39:CE:28:84:70:A6:73:9A:E3:CB:A0:9D:42:2B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F01D95300635DFB9E0E3B90 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9a38104-62e5-33c0-8548-7c4562848dd7.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 2001:579:8180::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:d9:53:00:63:5d:fb:9e:0e:3b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=a9c996e0-70dc-4db1-a7fb-87bef316b98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:89:e4:2c:10:67:c8:67:d5:fa:0b:f5:f0: eb:22:5d:30:30:88:87:31:ca:5d:ce:54:e2:cb:26: 66:7d:bc:8c:c6:b7:ac:71:d4:c9:91:6a:17:4e:a7: 5c:b3:b5:25:91:4c:83:2e:bc:a8:8d:25:6a:54:58: 74:ac:81:88:c7:d4:e3:85:39:d8:4d:cd:b1:e9:2a: 4b:44:e3:b5:a4:df:09:18:6a:36:ef:c9:51:42:6e: 2a:cd:85:23:fa:12:10:01:e3:b5:f4:aa:db:4f:f1: 39:5e:d7:0e:fb:3b:dd:f4:0f:42:54:ff:15:66:52: 8f:26:20:50:52:0a:2d:f2:b6:ea:10:b5:f5:09:87: f8:38:7a:82:af:71:0d:f2:78:b8:ea:a5:8d:23:c5: c7:ad:44:cb:45:e6:28:1c:bb:af:1a:3f:40:3e:49: e2:6a:ef:cf:88:bf:b4:11:8d:a5:8c:eb:bf:64:ed: d9:b0:33:13:55:00:db:4f:03:5f:00:dd:e1:77:8e: 7c:50:5e:c8:30:18:aa:59:e5:63:bc:78:f9:57:fb: da:a9:6b:4b:a0:05:51:d4:d5:cb:46:14:be:c8:e9: 5c:2e:a5:ca:21:4c:35:ed:c7:f8:f5:52:5a:69:e7: 4a:8d:cc:e3:f1:91:01:91:c4:9a:a6:7d:c5:1e:cd: a7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:61:DA:4B:60:39:CE:28:84:70:A6:73:9A:E3:CB:A0:9D:42:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9a38104-62e5-33c0-8548-7c4562848dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:8180::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5f:ff:a3:5b:ee:46:90:45:8c:41:51:f5:8e:7d:9d:94:eb: 6a:12:49:ba:9b:11:c2:fb:1d:93:e5:4b:3c:17:38:5f:fa:52: cd:02:bc:6a:33:7e:0f:ff:7a:42:92:00:70:7d:89:e8:ff:c7: aa:35:fb:50:d7:02:02:f2:84:56:9d:11:5c:dc:a3:4d:d2:04: 8b:46:3b:ef:17:1a:2b:ca:b2:6f:87:51:1c:d0:bf:5b:93:47: e0:26:f8:d2:8f:a7:f8:16:c9:92:72:fe:9c:34:79:a4:35:d2: 07:b5:df:83:27:db:f1:c2:57:7a:57:fa:a1:03:e0:7a:ef:d3: 21:3c:b2:c1:bf:8c:ad:4b:11:6e:4f:62:42:f6:87:8b:4e:60: e3:2b:57:15:24:ad:fe:8b:21:22:66:5f:a3:41:1d:33:9b:21: 39:3f:b8:fe:7b:52:2b:e2:0e:50:3a:26:c3:65:fa:22:14:65: 9f:12:fb:66:41:4a:07:cf:96:a6:48:39:ce:a4:38:2c:d9:c7: a7:27:f7:e3:fc:df:35:e1:7e:73:ae:f9:b6:30:97:eb:b4:1e: 85:2a:ee:b5:92:35:0e:73:56:9d:c8:7d:d1:52:aa:fa:c6:20: b8:29:96:57:1e:31:cd:cd:b7:c0:66:e9:d5:88:16:08:fb:08: 28:f5:a3:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsfAdlTAGNd+54OO5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTljOTk2ZTAtNzBkYy00ZGIxLWE3ZmItODdiZWYzMTZiOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/iJ5CwQZ8hn1foL9fDrIl0wMIiHMcpdzlTi yyZmfbyMxrescdTJkWoXTqdcs7UlkUyDLryojSVqVFh0rIGIx9TjhTnYTc2x6SpL ROO1pN8JGGo278lRQm4qzYUj+hIQAeO19KrbT/E5XtcO+zvd9A9CVP8VZlKPJiBQ Ugot8rbqELX1CYf4OHqCr3EN8ni46qWNI8XHrUTLReYoHLuvGj9APkniau/PiL+0 EY2ljOu/ZO3ZsDMTVQDbTwNfAN3hd458UF7IMBiqWeVjvHj5V/vaqWtLoAVR1NXL RhS+yOlcLqXKIUw17cf49VJaaedKjczj8ZEBkcSapn3FHs2n9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH5IYdpLYDnOKIRwpnOa48ugnUIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjlhMzgxMDQtNjJlNS0z M2MwLTg1NDgtN2M0NTYyODQ4ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHIAEFeYGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpf/6Nb7kaQRYxBUfWOfZ2U62oSSbqbEcL7HZPlSzwXOF/6Us0C vGozfg//ekKSAHB9iej/x6o1+1DXAgLyhFadEVzco03SBItGO+8XGivKsm+HURzQ v1uTR+Am+NKPp/gWyZJy/pw0eaQ10ge134Mn2/HCV3pX+qED4Hrv0yE8ssG/jK1L EW5PYkL2h4tOYOMrVxUkrf6LISJmX6NBHTObITk/uP57UiviDlA6JsNl+iIUZZ8S +2ZBSgfPlqZIOc6kOCzZx6cn9+P83zXhfnOu+bYwl+u0HoUq7rWSNQ5zVp3IfdFS qvrGILgpllceMc3Nt8Bm6dWIFgj7CCj1o9Y= -----END CERTIFICATE-----Generated at Wed Oct 15 23:52:46 2025 by rpki-client